Privacy policy

Data controller

{{LEGAL_NAME}}, publisher of the pop.run website.

Email: {{CONTACT_EMAIL}} Address: {{ADDRESS}}

Data collected

Via the contact form

• Name — to personalize the reply
• Email — to reply to you
• Message — your request
• Anonymized IP fingerprint (SHA-256 hash) — to limit spam (never plain IP)

Technical data

• Visit statistics via Umami self-hosted — no personal data is collected, no cookies are set.

Purposes and legal bases

Data	Purpose	Legal basis
Contact form	Commercial or informational reply	Legitimate interest (B2B) or consent
IP hash	Spam mitigation	Legitimate interest
Anonymous visit stats	Traffic understanding	Legitimate interest (no personal data)

Retention period

• Contact data: kept for 3 years after the last exchange, then deleted automatically
• IP hash: 1 hour (used only for rate limiting)
• Umami stats: aggregated, not linked to any individual

Recipients

Data is not transmitted to third parties.

The only subprocessor is Hetzner Online GmbH (hosting provider, Germany, GDPR-compliant).

Your rights

Under GDPR, you have at any time the following rights:

• Access: obtain a copy of the data concerning you
• Rectification: correct inaccurate data
• Erasure: request deletion of your data
• Objection: refuse processing
• Portability: retrieve your data in a reusable format
• Restriction: limit processing

To exercise these rights, write to: {{CONTACT_EMAIL}}

Reply within 30 days maximum.

You also have the right to lodge a complaint with the CNIL (French data protection authority).

Cookies

See the cookies page. In short: no tracking cookies, only a technical session cookie during administrative login.

Security

• Encrypted communications (HTTPS)
• Encrypted storage at rest on the host
• Access to data restricted to the data controller
• IP never stored in plain text (SHA-256 hash with salt)
• Daily backups

Modifications

This policy may evolve. The applicable version is the one online at the time of data collection. Last updated: May 15, 2026.